-
Ukraine dismantles crypto scam network that stole €4.3 million
Ukrainian law enforcement has dismantled a cryptocurrency investment scam network accused of stealing more than €4.3 million from victims through fraudulent call centers and social engineering. Four suspects were arrested following a joint investigation involving Ukraine’s Cyber Police, the National…
-
Chinese hackers use ARTEX AI in automated attacks against 200 orgs
Chinese state-linked hackers have used ARTEX AI, a multi-agent penetration-testing framework, to conduct automated attacks against more than 200 organizations across 14 countries, according to CrowdStrike. The campaign began on October 17 and targeted high-value sectors including government, telecommunications, pharmaceuticals,…
-
PHP2Shell security flaws now sucessfully exploited in the wild
Two critical PHP remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell, have now been successfully exploited in the wild. The confirmed activity marks an important escalation from earlier scanning and failed exploit attempts to verified remote code…
-
CISA: SafePay ransomware hit over 600 critical infrastructure orgs
The SafePay ransomware group has compromised more than 600 organizations across multiple critical infrastructure sectors worldwide since August 2024, according to a joint cybersecurity advisory from CISA and international law enforcement partners. The campaign has affected organizations across North America,…
-
Anthropic warns self-replicating AI could spread to your smart devices
Anthropic is warning that small AI models could soon become capable of self-replication across consumer IoT devices, potentially allowing them to spread through smart TVs, Android TV boxes, appliances, and other connected hardware without relying on centralized data centers. The…
-
Low-cost Android phones ship with residential proxy malware
A newly identified Android malware campaign dubbed Midnight Mimosa is targeting low-cost smartphones with malicious software embedded directly in device firmware, enabling attackers to install applications silently, conduct ad fraud, and potentially turn infected phones into residential proxies. According to…
-
Ninja Forms plugin flaw exploited to hack WordPress sites
Attackers are actively exploiting stored cross-site scripting (XSS) vulnerabilities in two widely used WordPress plugins — Ninja Forms and WPC Product Bundles for WooCommerce — to establish persistent access, create rogue administrator accounts, and deploy malicious plugins. The vulnerabilities are…
-
Sality botnet infrastructure dismantled in joint global takedown
International law enforcement agencies and cybersecurity companies have disrupted the Sality botnet, dismantling infrastructure behind one of the longest-running malware operations on the internet. The coordinated takedown involved authorities in the United States and Europe, with support from Europol and…
-
Hacker uses DeepSeek AI to autonomously attack vulnerable servers
Artificial intelligence is rapidly transforming the cyber threat landscape. Researchers have uncovered a campaign in which a threat actor leveraged DeepSeek AI together with the Hermes Agent framework to autonomously identify, evaluate, and attempt to exploit vulnerable internet-facing servers with…
Must-Read Posts
- ‘PlushDaemon’ hackers hijack software updates in supply-chain attacks
- Adidas warns of data breach after customer service provider hack
- AI Cuts vCISO Workload by 68% as Demand Skyrockets, New Report Finds
- AI in Cybersecurity: Revolutionizing Defense Against Emerging Threats
- Android gets patches for Qualcomm zero-day exploited in attacks
